Surviving the Web: A Journey into Web Session Security